Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/25LU7394eXHg-PBe4_GLTG3VIkw.roa
File:                     25LU7394eXHg-PBe4_GLTG3VIkw.roa (raw, json)
Hash identifier:          HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=
Subject key identifier:   DB:92:D4:EF:7F:78:79:71:E0:F8:F0:5E:E3:F1:8B:4C:6D:D5:22:4C
Certificate issuer:       /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial:       019424455B551E0496A52576924D1D22AC49
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/25LU7394eXHg-PBe4_GLTG3VIkw.roa
Signing time:             Wed 01 Jan 2025 23:48:32 +0000
ROA not before:           Wed 01 Jan 2025 23:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39540
IP address blocks:        185.95.219.0/24 maxlen: 24
                          2a05:fc87::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:5b:55:1e:04:96:a5:25:76:92:4d:1d:22:ac:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: Jan  1 23:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=db92d4ef7f787971e0f8f05ee3f18b4c6dd5224c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:1b:e4:44:9d:d1:7b:9f:3d:26:8c:63:3c:
                    c4:5c:3b:c7:67:59:18:d1:4d:80:d1:db:a2:a1:b6:
                    dc:f8:8e:68:2c:4a:f7:f0:94:0d:65:ca:de:df:7d:
                    a7:87:f4:b6:a6:c1:f3:ca:3a:01:41:27:4c:7a:ea:
                    73:24:e4:d3:78:73:6d:2c:00:01:c5:c9:78:5e:95:
                    10:6b:51:65:eb:59:2a:05:3b:eb:8e:05:b8:95:00:
                    6e:fa:37:57:45:29:2f:df:33:13:99:ad:77:a0:da:
                    ba:9c:53:dc:11:e4:2e:54:78:15:86:8f:9f:ec:9a:
                    1a:cb:b1:e8:e5:be:31:f9:bb:79:d7:ce:af:23:df:
                    c4:6c:74:3f:fe:a2:d9:21:30:98:96:35:f9:b9:f5:
                    c6:5f:78:25:c6:0b:5f:68:30:05:e2:4d:26:16:74:
                    fe:06:a1:69:c4:1b:3a:ff:60:06:4e:32:46:d6:8c:
                    cc:ea:20:3f:e0:68:dc:f6:ec:87:39:21:2d:0a:82:
                    38:25:d2:fd:59:13:1c:78:d8:21:6d:f3:f0:77:31:
                    12:f1:50:38:c1:2e:63:ab:67:f5:cb:1b:91:14:ee:
                    bf:a7:8e:0f:89:41:a6:26:72:42:9d:1d:32:99:72:
                    08:ae:6f:44:a2:80:60:57:27:4d:bd:7e:5d:34:09:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:92:D4:EF:7F:78:79:71:E0:F8:F0:5E:E3:F1:8B:4C:6D:D5:22:4C
            X509v3 Authority Key Identifier:
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/25LU7394eXHg-PBe4_GLTG3VIkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.95.219.0/24
                IPv6:
                  2a05:fc87::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:b1:94:f9:7b:d4:64:af:78:78:61:10:81:2e:a4:43:f9:
         56:f5:76:d6:1e:da:fb:39:4c:ab:fc:f4:8d:e3:de:74:bf:d4:
         4a:4f:b3:dd:d2:0d:cf:d8:e6:0d:9f:19:78:d2:6c:1c:21:6c:
         b9:0e:ea:e7:d5:c2:92:7c:02:c7:4c:97:27:2c:4d:7d:25:bf:
         49:69:53:47:52:3a:a7:6d:13:5c:51:f4:b8:54:9f:5d:2f:c7:
         67:2f:ba:e3:a0:a2:13:cd:da:cf:ca:e3:2e:e4:df:cc:f9:90:
         17:f0:6d:97:99:8f:06:19:84:27:6b:c3:fe:dd:b4:bc:c0:98:
         02:39:aa:f6:ad:bf:ce:49:77:8d:5c:d1:e4:41:36:7f:7a:8c:
         eb:32:16:8b:7a:68:ed:4f:b9:40:2d:39:51:c6:85:5a:84:57:
         7a:7b:59:36:95:41:ae:49:98:6f:ae:aa:eb:d7:ed:42:71:67:
         9b:75:9a:5f:dc:20:e6:da:42:0b:6c:4f:35:08:bb:11:a0:99:
         f0:96:e3:fc:9a:92:e2:67:01:9d:ce:64:93:bf:da:52:ef:2b:
         ca:68:eb:fc:58:80:18:c0:37:24:c5:be:88:7f:2e:5d:96:b9:
         98:cf:f8:b8:87:32:1b:d5:50:d7:da:5f:c8:41:b1:f7:2b:7d:
         88:05:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----